VulnerabilityModified
CVE-2018-4936
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability.
MEDIUM 6.5EPSS 28.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 28.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information disclosure.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 28.74% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- adobe/flash player desktop runtime · adobe/flash player
- Source
- psirt@adobe.com
References
- http://www.securityfocus.com/bid/103708Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040648Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1119Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb18-08.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201804-11Third Party Advisory
- https://www.exploit-db.com/exploits/44526/Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/103708Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040648Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1119Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb18-08.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201804-11Third Party Advisory
- https://www.exploit-db.com/exploits/44526/Exploit, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.